Xpilot Ad Maker

Generate a 30-second cinematic ad video with consistent character, AI narration, brand overlays, and ambient music. Uses Vidu reference-to-video for characte...

This skill appears to do what it says: generate a protagonist image, create four Vidu reference2video clips, synthesize narration, compose with ffmpeg, and upload outputs to your Cloudflare R2 bucket. Before installing, consider: 1) Only provide API keys you control and are comfortable using for this purpose; prefer scoped/limited keys for R2 (bucket-limited) and ensure VIDU/WAVESPEED/REPLICATE keys are in accounts you trust. 2) Uploaded assets are served from R2_PUBLIC_URL — they will be publicly reachable if that URL is a public bucket. 3) The scripts load .env.local via dotenv — keep secrets out of repos and test in an isolated environment. 4) The code hard-codes a macOS font path (non-fatal) and uses ffmpeg-static bundled binary. If you want extra caution, run in a disposable environment or with dummy/test keys first, or review/modify the code to restrict R2 key permissions (put-only on a dedicated bucket).

Type: OpenClaw Skill Name: xpilot-ad-maker Version: 0.1.0 The skill bundle is a legitimate automation pipeline for generating AI-driven video advertisements using Vidu, Wavespeed, and Replicate APIs. It uses standard libraries like @aws-sdk/client-s3 for storage and ffmpeg-static for video processing, with all external commands executed safely via execFileSync using argument arrays. No evidence of data exfiltration, malicious execution, or prompt injection was found; the environment variables requested are strictly necessary for the stated functionality.